HackingCustomer Data InvolvedIDENTITY_BASICLowContained
The Kendal Corporation
bd_a5608ebfb0a0bf05 · schema v1 · pii pii-v1
Full breach record for The Kendal Corporation →The Kendal Corporation notified consumers of a data breach involving unauthorized access to member information stored on its network between June 26 and June 30, 2024. The incident involved names combined with other personal data. The company engaged third-party forensic specialists, notified law enforcement, and offered credit monitoring services.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_c2e8744075523f9eNew Hampshire State AGfiled 2024-09-17(6d gap)Verified
- bd_42d2c8983f75f43cIndiana State AGfiled 2024-12-27(107d gap)Verified
- bd_dbebfd707b1fce33Vermont State AGfiled 2024-12-30(110d gap)Verified
- bd_c31911bef98904e5Maine State AGfiled 2024-12-31(111d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 113d gap
- bd_58ba581dac763481New Hampshire State AGfiled 2025-01-02(113d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-09-11-kendal-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2024
- Raw hash
- 956a5d7a0bcba9797706ff8834690963ea76becbd641751baf9b26524256b0a6
Reporting entity
- Name
- The Kendal Corporationnorm: the kendal
Victim entity
- Name
- The Kendal Corporationnorm: the kendal
Incident
- Discovered
- Jun 30, 2024
- Materiality determined
- Sep 11, 2024
- Notification sent
- Sep 11, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.